From fc437d1e241eebf2c862986b466d9c29d6f2c1dc Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 15 Aug 2024 06:34:08 +0000 Subject: [PATCH] Publish Advisories GHSA-5xfh-rrx5-67m4 GHSA-cjw7-m3pc-wg7r GHSA-q2wf-pr3p-9rhr GHSA-q83v-hq3j-4pq3 GHSA-v5hg-j2mx-ff74 --- .../GHSA-5xfh-rrx5-67m4.json | 42 +++++++++++++++ .../GHSA-cjw7-m3pc-wg7r.json | 50 +++++++++++++++++ .../GHSA-q2wf-pr3p-9rhr.json | 54 +++++++++++++++++++ .../GHSA-q83v-hq3j-4pq3.json | 42 +++++++++++++++ .../GHSA-v5hg-j2mx-ff74.json | 42 +++++++++++++++ 5 files changed, 230 insertions(+) create mode 100644 advisories/unreviewed/2024/08/GHSA-5xfh-rrx5-67m4/GHSA-5xfh-rrx5-67m4.json create mode 100644 advisories/unreviewed/2024/08/GHSA-cjw7-m3pc-wg7r/GHSA-cjw7-m3pc-wg7r.json create mode 100644 advisories/unreviewed/2024/08/GHSA-q2wf-pr3p-9rhr/GHSA-q2wf-pr3p-9rhr.json create mode 100644 advisories/unreviewed/2024/08/GHSA-q83v-hq3j-4pq3/GHSA-q83v-hq3j-4pq3.json create mode 100644 advisories/unreviewed/2024/08/GHSA-v5hg-j2mx-ff74/GHSA-v5hg-j2mx-ff74.json diff --git a/advisories/unreviewed/2024/08/GHSA-5xfh-rrx5-67m4/GHSA-5xfh-rrx5-67m4.json b/advisories/unreviewed/2024/08/GHSA-5xfh-rrx5-67m4/GHSA-5xfh-rrx5-67m4.json new file mode 100644 index 00000000000..c7502727ca5 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-5xfh-rrx5-67m4/GHSA-5xfh-rrx5-67m4.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5xfh-rrx5-67m4", + "modified": "2024-08-15T06:32:22Z", + "published": "2024-08-15T06:32:22Z", + "aliases": [ + "CVE-2024-7063" + ], + "details": "The ElementsKit Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.6 via the 'render_raw' function. This can allow authenticated attackers, with Contributor-level permissions and above, to extract sensitive data including private, future, and draft posts.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7063" + }, + { + "type": "WEB", + "url": "https://wpmet.com/plugin/elementskit" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d35dd18b-0f05-482f-aef3-08977cbec8a0?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-200" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-15T06:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-cjw7-m3pc-wg7r/GHSA-cjw7-m3pc-wg7r.json b/advisories/unreviewed/2024/08/GHSA-cjw7-m3pc-wg7r/GHSA-cjw7-m3pc-wg7r.json new file mode 100644 index 00000000000..7024fa50db7 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-cjw7-m3pc-wg7r/GHSA-cjw7-m3pc-wg7r.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cjw7-m3pc-wg7r", + "modified": "2024-08-15T06:32:22Z", + "published": "2024-08-15T06:32:22Z", + "aliases": [ + "CVE-2024-7814" + ], + "details": "A vulnerability, which was classified as problematic, was found in CodeAstro Online Railway Reservation System 1.0. Affected is an unknown function of the file /admin/admin-add-employee.php of the component Add Employee Page. The manipulation of the argument emp_fname /emp_lname /emp_nat_idno/emp_addr leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7814" + }, + { + "type": "WEB", + "url": "https://github.com/CYB84/CVE_Writeup/blob/main/Online%20Railway%20Reservation%20System/Stored%20XSS.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.274710" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.274710" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-15T04:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-q2wf-pr3p-9rhr/GHSA-q2wf-pr3p-9rhr.json b/advisories/unreviewed/2024/08/GHSA-q2wf-pr3p-9rhr/GHSA-q2wf-pr3p-9rhr.json new file mode 100644 index 00000000000..32a88e8dca9 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-q2wf-pr3p-9rhr/GHSA-q2wf-pr3p-9rhr.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q2wf-pr3p-9rhr", + "modified": "2024-08-15T06:32:22Z", + "published": "2024-08-15T06:32:22Z", + "aliases": [ + "CVE-2024-7815" + ], + "details": "A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-update-employee.php of the component Update Employee Page. The manipulation of the argument emp_fname /emp_lname /emp_nat_idno/emp_addr leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7815" + }, + { + "type": "WEB", + "url": "https://github.com/CYB84/CVE_Writeup/blob/main/Online%20Railway%20Reservation%20System/Stored%20XSS.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.274711" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.274711" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.391376" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-15T04:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-q83v-hq3j-4pq3/GHSA-q83v-hq3j-4pq3.json b/advisories/unreviewed/2024/08/GHSA-q83v-hq3j-4pq3/GHSA-q83v-hq3j-4pq3.json new file mode 100644 index 00000000000..7d2eeeadacf --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-q83v-hq3j-4pq3/GHSA-q83v-hq3j-4pq3.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q83v-hq3j-4pq3", + "modified": "2024-08-15T06:32:22Z", + "published": "2024-08-15T06:32:22Z", + "aliases": [ + "CVE-2024-6534" + ], + "details": "Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with CVE-2024-6533, it could result in account takeover.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6534" + }, + { + "type": "WEB", + "url": "https://directus.io" + }, + { + "type": "WEB", + "url": "https://fluidattacks.com/advisories/capaldi" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-639" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-15T04:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-v5hg-j2mx-ff74/GHSA-v5hg-j2mx-ff74.json b/advisories/unreviewed/2024/08/GHSA-v5hg-j2mx-ff74/GHSA-v5hg-j2mx-ff74.json new file mode 100644 index 00000000000..1df76b1ea2e --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-v5hg-j2mx-ff74/GHSA-v5hg-j2mx-ff74.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v5hg-j2mx-ff74", + "modified": "2024-08-15T06:32:22Z", + "published": "2024-08-15T06:32:22Z", + "aliases": [ + "CVE-2024-7064" + ], + "details": "The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 3.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7064" + }, + { + "type": "WEB", + "url": "https://wpmet.com/plugin/elementskit" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/181e6f3a-dbcf-44a6-b725-6325d9e56453?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-15T06:15:12Z" + } +} \ No newline at end of file